$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: CRON7BGq21kcAuf9yhw3qlss36vm4OeEbphT5O8gJtI= Subject key identifier: 27:28:C6:4D:12:DF:F3:9C:08:93:C6:6C:FE:62:D2:B1:E2:5E:93:96 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0624 Signing time: Wed 12 Mar 2025 16:51:49 +0000 Manifest this update: Wed 12 Mar 2025 16:51:49 +0000 Manifest next update: Wed 19 Mar 2025 16:51:49 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: CVkhlJMs1PzQDeJV6ybQRzeVfBNtRw1b2u5YmREwuLM=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992 Validity Not Before: Mar 12 16:51:49 2025 GMT Not After : Mar 19 16:51:49 2025 GMT Subject: CN=67d1bba5-00f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:e1:4f:41:3b:18:7a:72:9b:1b:48:3a:fc: 77:a9:a4:a4:af:04:34:d0:ef:03:83:ca:fc:2e:69: 64:10:01:54:56:a7:35:42:c4:a4:6f:b4:d1:8e:49: 77:b0:55:5b:92:b8:1b:eb:2f:09:45:54:40:82:c4: fd:7c:d1:0c:d5:77:16:26:73:f1:4f:d4:cc:8b:58: dc:2e:b4:b6:73:e1:f9:e2:0c:bd:6c:de:b5:4d:c9: e3:eb:8e:05:ca:e6:53:15:c0:d5:71:5e:70:95:32: 66:e2:24:30:08:b1:07:1e:48:fc:b9:58:d7:ff:d3: 12:0b:08:7e:6d:e9:ed:a2:f1:85:b4:9f:36:d8:77: 9a:dd:8b:b5:3b:00:bc:f4:51:ba:aa:85:14:2d:bc: 1a:6a:18:98:90:4e:70:73:2f:60:a6:41:00:82:eb: 93:ce:5c:53:24:85:d9:cd:da:32:c6:4f:bb:3d:b8: e4:14:b2:30:16:dd:c6:d2:86:b1:33:4c:1f:ac:1e: f5:cf:a8:1c:79:ab:03:19:d8:82:6b:b4:a7:4c:72: a7:89:e8:a0:e6:5c:07:fa:94:ff:61:0d:71:7d:25: 6e:83:07:e7:94:91:77:40:92:bf:ae:db:af:5b:7a: dc:61:6b:36:fd:70:c7:cf:69:bb:6b:a8:ae:81:92: ce:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:28:C6:4D:12:DF:F3:9C:08:93:C6:6C:FE:62:D2:B1:E2:5E:93:96 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:0e:56:aa:f5:40:38:bf:8c:d6:26:1d:9e:7e:3a:1e:5d:7e: 50:72:e5:e3:94:e5:da:23:80:2f:b1:09:b0:ad:fe:bb:b8:e1: 8b:2c:b1:6f:49:01:61:aa:ab:c7:52:2b:a4:dc:11:a0:f4:12: e3:cb:7d:8b:dc:a5:60:f0:24:47:47:12:80:10:94:18:12:dc: 0b:3c:0b:f7:d7:f4:d3:2b:30:88:62:8c:35:e2:ad:de:64:50: 0b:22:2f:b5:18:fc:8e:3e:c1:53:fa:35:db:dd:92:b1:f9:7a: 11:95:9f:cc:91:7f:e4:9b:38:35:57:4d:0d:55:20:77:aa:ac: 5d:71:e1:4e:06:c0:73:20:7c:9b:3c:de:72:6c:9a:c8:1a:dd: 98:e6:8c:08:be:78:ff:74:8c:a5:3e:00:f6:02:9b:b8:e4:f8: 84:bd:03:84:27:cb:b4:9d:e9:01:eb:b5:bc:06:ba:83:31:7a: d2:dd:33:b4:d5:ae:de:fb:71:8b:dc:65:3b:1c:cd:1d:d7:de: 91:62:58:ff:e8:dd:1e:57:5b:5a:54:90:d6:2b:a0:df:7e:8a: 38:92:da:87:cf:1d:ff:69:5b:b1:15:4f:af:fc:a3:77:b1:f7: 24:88:28:c8:31:3d:f2:dc:e4:5f:4d:b8:e1:1a:91:c4:15:cc: 3c:ff:fb:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwMzEyMTY1MTQ5WhcNMjUwMzE5MTY1MTQ5WjAYMRYwFAYD VQQDEw02N2QxYmJhNS0wMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwXhT0E7GHpymxtIOvx3qaSkrwQ00O8Dg8r8LmlkEAFUVqc1QsSkb7TRjkl3 sFVbkrgb6y8JRVRAgsT9fNEM1XcWJnPxT9TMi1jcLrS2c+H54gy9bN61Tcnj644F yuZTFcDVcV5wlTJm4iQwCLEHHkj8uVjX/9MSCwh+bentovGFtJ822Hea3Yu1OwC8 9FG6qoUULbwaahiYkE5wcy9gpkEAguuTzlxTJIXZzdoyxk+7PbjkFLIwFt3G0oax M0wfrB71z6gceasDGdiCa7SnTHKnieig5lwH+pT/YQ1xfSVugwfnlJF3QJK/rtuv W3rcYWs2/XDHz2m7a6iugZLOQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcoxk0S 3/OcCJPGbP5i0rHiXpOWMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQDlaq9UA4v4zWJh2efjoeXX5QcuXjlOXaI4AvsQmwrf67uOGLLLFv SQFhqqvHUiuk3BGg9BLjy32L3KVg8CRHRxKAEJQYEtwLPAv31/TTKzCIYow14q3e ZFALIi+1GPyOPsFT+jXb3ZKx+XoRlZ/MkX/kmzg1V00NVSB3qqxdceFOBsBzIHyb PN5ybJrIGt2Y5owIvnj/dIylPgD2Apu45PiEvQOEJ8u0nekB67W8BrqDMXrS3TO0 1a7e+3GL3GU7HM0d196RYlj/6N0eV1taVJDWK6Dffoo4ktqHzx3/aVuxFU+v/KN3 sfckiCjIMT3y3ORfTbjhGpHEFcw8//sZ -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:50 2025 by rpki-client